Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9570dd3e-b532-49b3-b128-0361f8696108/dbdf61b7-5ac6-37a4-95ad-23610262f336.roa
File:                     dbdf61b7-5ac6-37a4-95ad-23610262f336.roa (raw, json)
Hash identifier:          x1n8SPADokT0FCHwSfVyoAtC/8BnVtK2ftwV4njRw7I=
Subject key identifier:   00:DE:2A:A4:38:CE:2B:A9:A4:30:58:79:BB:D5:69:25:90:01:90:ED
Certificate issuer:       /CN=9570dd3e-b532-49b3-b128-0361f8696108
Certificate serial:       010D0C9F4328584F19FCFA00CF2D46D7D701B280
Authority key identifier: 09:D6:86:0F:97:10:7C:4D:A7:C9:8F:F3:B3:20:E2:ED:C8:33:8F:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9570dd3e-b532-49b3-b128-0361f8696108.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9570dd3e-b532-49b3-b128-0361f8696108/dbdf61b7-5ac6-37a4-95ad-23610262f336.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        141.193.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9570dd3e-b532-49b3-b128-0361f8696108/9570dd3e-b532-49b3-b128-0361f8696108.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9570dd3e-b532-49b3-b128-0361f8696108/9570dd3e-b532-49b3-b128-0361f8696108.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9570dd3e-b532-49b3-b128-0361f8696108.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:fa:00:cf:2d:46:d7:d7:01:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9570dd3e-b532-49b3-b128-0361f8696108
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=402e760b-3c8f-4fd9-a854-2e8aff0e9880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:aa:18:49:69:28:20:83:66:d0:32:5b:13:15:
                    6d:d1:ab:fb:6e:93:e3:20:b2:3c:63:43:3a:7c:bd:
                    0d:06:04:0a:75:b6:0d:f2:a5:65:65:25:10:5a:6a:
                    c2:f3:3a:e4:c4:aa:09:97:49:b9:2b:25:f2:f0:23:
                    60:33:ec:e8:ec:db:08:ff:88:8d:60:b8:24:5e:fb:
                    6a:63:cc:b1:4e:47:6e:f7:39:42:a6:f7:c9:ff:4c:
                    4d:0b:86:7f:3b:4e:dc:5f:aa:3c:e4:fa:21:d3:e7:
                    60:df:3b:22:66:b3:00:2a:ac:aa:eb:6a:f1:a6:97:
                    cd:57:c2:cf:3c:c6:ae:07:4d:f3:6d:e3:10:10:d3:
                    26:cf:06:a0:ba:da:8e:a0:2e:4e:2c:b6:27:10:10:
                    00:20:e5:3b:39:57:e8:c4:c1:9e:73:87:56:51:5c:
                    62:83:aa:8f:6c:45:1b:fd:64:34:59:a3:be:a9:bf:
                    30:ac:ca:e0:43:b7:4b:36:2d:34:54:e6:d5:a4:cf:
                    70:14:c1:2f:31:e3:e8:d4:66:fa:04:57:ce:3e:fd:
                    3a:60:b4:f3:c7:ef:71:8a:eb:83:61:6e:c1:03:0f:
                    2f:d3:0f:07:8f:ff:fe:7a:72:63:89:66:1c:eb:44:
                    df:e0:1f:60:a3:63:a3:c2:e3:67:6e:c3:47:4e:fd:
                    a1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DE:2A:A4:38:CE:2B:A9:A4:30:58:79:BB:D5:69:25:90:01:90:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9570dd3e-b532-49b3-b128-0361f8696108/dbdf61b7-5ac6-37a4-95ad-23610262f336.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9570dd3e-b532-49b3-b128-0361f8696108/9570dd3e-b532-49b3-b128-0361f8696108.crl

            X509v3 Authority Key Identifier:
                keyid:09:D6:86:0F:97:10:7C:4D:A7:C9:8F:F3:B3:20:E2:ED:C8:33:8F:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9570dd3e-b532-49b3-b128-0361f8696108.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:af:f6:e9:75:b6:33:fe:71:92:5f:db:bd:ee:b1:7f:81:20:
         67:ee:8a:5d:e9:4f:6c:c5:4f:83:03:30:4a:16:c0:45:09:3b:
         58:dc:7f:d3:39:f1:a5:41:37:b9:2e:db:00:58:f2:32:a7:f5:
         77:bd:99:62:c8:32:d2:11:6a:33:43:c8:94:b7:4e:85:f1:cf:
         10:86:a6:3a:0f:c1:7f:55:09:25:ff:ea:fa:6e:74:02:c0:ae:
         c5:31:21:a0:16:86:82:a3:c3:b7:44:d9:7d:56:ed:e7:43:e8:
         1e:82:43:43:fb:d2:9c:c8:c5:d6:27:22:4e:5a:f6:e4:b4:4d:
         77:70:d8:43:ed:ef:09:80:33:82:0b:ae:e5:d0:b3:f9:bd:9a:
         b3:b1:7c:7e:c4:46:bb:3f:77:7b:e4:f2:f3:d0:ba:14:ac:92:
         07:a5:50:ca:8f:c8:0f:83:d2:70:36:64:a0:59:18:88:0b:40:
         e9:22:50:49:e5:79:39:f4:30:2a:05:dc:24:07:81:51:2e:61:
         db:0c:55:91:6e:b2:48:bd:4e:55:4c:d5:a5:40:e7:9b:61:2f:
         f0:e7:ec:85:e5:6f:97:25:34:66:96:9f:bf:62:e0:1a:dd:3d:
         68:bd:11:58:2f:47:dc:d4:5f:94:82:74:7e:76:35:37:33:2c:
         65:12:85:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:06:20 2026 by rpki-client